Infrastructure and Active Directory Engineer - DV Cleared in Windsor

Location: Reading

Duration: Initial 6 months (very likely to extend)

Inside IR35

Candidates must hold active DV Clearance.

We are recruiting an experienced Infrastructure and Active Directory Engineer to join a secure, business-critical IT delivery team. This is a broad generalist role covering Windows and Linux Servers, virtualisation, storage, backup and monitoring, alongside hands-on Microsoft Active Directory support. The estate combines established platforms that must be kept secure and supported with newer technology being introduced through modernisation and obsolescence work.

The role is predominantly third-line, acting as a technical escalation point for complex incidents, problems, changes and project work, with some second-line activity as required. Candidates should bring strong depth in either core infrastructure or Active Directory, sound practical capability across the other, and the confidence to own issues and explain risks and options clearly to technical and non-technical stakeholders.

This is a hands-on, all-round role covering Windows and Linux Servers, virtualisation, storage, backup and monitoring, as well as Microsoft Active Directory. Most of the work is third line, so you will be required to handle the more complex issues, changes and project work, with some second-line support when needed. You should be strong in either infrastructure or Active Directory and comfortable working in the other, with some Linux and networking knowledge.

Key Responsibilities:

• Act as a third-line escalation point for infrastructure and Active Directory services, owning complex incidents through to resolution and supporting second-line incidents and requests as required.
• Administer and maintain on-premises Active Directory, Group Policy, DNS, DHCP, replication, trusts, authentication, Windows PKI and privileged access, including health checks and remediation.
• Support Windows Server 2016 onwards and RHEL/Linux Servers, VMware vSphere and Hyper-V virtualisation, clustered and HCI platforms, SAN/NAS storage, enterprise backup and monitoring, including capacity, resilience and disaster recovery.
• Carry out builds, patching (including via SCCM and WSUS), upgrades, vulnerability remediation and hardware and operating system life cycle work, managing ageing and out-of-support platforms and identifying security and obsolescence risks early.
• Support modernisation and obsolescence projects, including moves to Windows Server 2022/2025, current RHEL, VMware and Hyper-V/Azure Local releases and modern HCI and storage, applying tiered administration and secure-by-design principles.
• Investigate recurring or high-impact faults across connected layers, leading root cause analysis and corrective actions.
• Plan and deliver changes and project work, including testing, implementation, back-out planning and service transition.
• Perform datacentre activities in controlled environments, including hardware installation, cabling and health checks.
• Maintain technical documentation and records, working within ITIL Incident, Problem, Change and Configuration Management processes.
• Drive automation and continual improvement and share knowledge with colleagues and second-line teams.
• Participate in planned out-of-hours work or incident support where required by the service.

Essential Experience and Capabilities:

• Proven third-line infrastructure engineering experience in a medium or large enterprise environment, with the flexibility to support second-line work.
• Strong depth in either core infrastructure or Active Directory, with sound hands-on capability across the other.
• Hands-on experience of Windows Server 2016 onwards, VMware vSphere (ESXi and vCenter) and/or Hyper-V, clustering or HCI, SAN/NAS storage, enterprise backup and disaster recovery, with familiarity with SCCM, WSUS and SCOM.
• Working knowledge of Red Hat Enterprise Linux or comparable distributions, including routine administration, patching and troubleshooting.
• A structured approach to troubleshooting, separating root cause from symptoms and coordinating resolution across teams.
• Working knowledge of networking fundamentals, including TCP/IP, DNS, Firewalls, ports and routing.
• Experience in secure, controlled environments with formal access, audit and change requirements, using ITIL-aligned processes.
• Clear documentation, communication and stakeholder skills, with the ability to work independently and prioritise competing demands.
• Current DV clearance. Candidates who do not already hold valid DV clearance will not meet the requirement.